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(57) Disclosed is a method (200) for managing re- 
source usage of a particular resource by a set of related 
code, such as code executed on behalf of a downloaded 
applet. A resource indicator (102, 104) is associated 
with the related code, and the resource indicator (102, 
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Description 1 

BACKGROUND OF THE INVENTION 



[0001] The invention relates generally to software ap- 
plications and, more particularly, to methods and appa- 
ratus for managing resource usage in an object-based 
system. 

[0002] In the consumer field, there is intense pressure 
to keep costs down. Thus, the capabilities of memory 
and CPU devices within consumer systems, for exam- 
ple, are scaled down as much as possible to minimize 
overall costs. For example, cable television set top box- 
es typically include limited memory space and CPU ca- 
pabilities. As object-based systems are integrated with- 
in consumer devices, it is becoming more important to 
manage resource usage effectively within the object- 
based systems. In other words, as a result of limited re- 
sources (among other reasons), a major issue within the 
object-oriented field is how to track and manage re- 
source usage. 

[0003] It is especially important to track resource us- 
age of untrusted code. For example, it is important to 
track the resource usage of an applet that is downloaded 
from an untrusted URL into a set top box. The down- 
loaded applet may be maliciously or unintentionally de- 
signed to consume an inordinate amount of resources, 
such as memory space or CPU time. 
[0004] It is also important to track and manage re- 
source usage of sets of related code. For example, the 
threads executed on behalf of an applet may together 
or individually consume too much of a limited resource 
of the set top box. Thus, it is not enough to simply track 
and manage the resource usage of individual threads. 
For example, an applet may initiate multiple threads that 
work together to consume resources. Tracking resource 
usage of individual threads only allows one to kill an in- 
dividual thread. However, prior to killing a resource con- 
suming thread, an applet may launch another resource 
consuming thread. In other words, if a way existed for 
determining that an applet or set of related code is con- 
suming too much of a resource, all threads that are as- 
sociated and/or controlled by the greedy applet may be 
prevented together Irom consuming too much of a re- 
source. 

[0005] In sum, there is a need for improved methods 
and apparatus for tracking and managing resource us- 
age. Additionally, there is a need for mechanisms for 
tracking and managing resource usage for sets of relat- 
ed code. 

SUMMARY OF THE INVENTION 

[0006] Broadly speaking, the present invention fills 
these needs by providing apparatus and methods for 
managing resource usage of related code, such as code 
executed on behalf of an applet. In one embodiment, a 
method for managing the usage of a particular resource 
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by a set of related code is disclosed.' A resource indica- 
tor is associated with the related code, and the resource 
indicator indicates an amount of resource usage of the 
particular resource by the related code. For example, a 

5 counter tracks how many bytes (e.g., of Java™ heap 
memory) are being consumed by code executed on be- 
half of an applet. The resource indicator is updated 
when the related code increases or decreases its col- 
lective resource usage of the particular resource. For 

10 example, the counter is increased when the applet in- 
creases its memory usage by having memory allocated 
for its use, and the counter is decreased when the ap- 
plet's memory is reclaimed. 

[0007] In another embodiment, the invention is imple- 
15 mented in a computer readable medium containing 
computer codes for managing resource usage. The 
computer readable medium includes computer code for 
associating a resource indicator with the related code 
that indicates an amount of resource usage of the par- 
20 ticular resource by the related code and computer code 
for updating the resource indicator when the related 
code increases or decreases its collective resource us- 
age of the particular resource. 

[0008] In another embodiment, a computer system for 

25 managing resource usage by a set of related code is 
disclosed. The computer system includes a resource 
context associated with the set of related code. For ex- 
ample, a resource is associated with each set of applets 
from a particular source (e.g., URL). The resource con- 

30 text includes a resource indicator that is associated with 
a resource type and indicative of how much of the re- 
source type is being utilized by the set of related code. 
For example, the resource context includes a counter 
for tracking the amount of memory (e.g., Java™ heap) 

35 utilized by the resource context's applets. The computer 
system also includes a resource object associated with 
the resource context. The resource object indicates how 
much of the resource type may be utilized by the set of 
related code. For example, a memory counter indicates 

to that the resource context's applets may only use 28 
bytes of memory (e.g., Java™ heap). The computer sys- 
tem further includes an update mechanism configured 
to increment the resource indicators of the resource 
context when the set of related code increases its re- 

45 source usage of the resource type associated with the 
updated resource indicator. 

[0009] The present invention has several associated 
advantages. For example, by tracking the resource us- 
age of related code (e.g., applets from the same 

50 source), actions to halt or prevent overuse of resources 
may be implemented on an entire set of related code. 
For example, if an applet is downloaded from a particu- 
lar web site into a set top box, the applet's usage of the 
set top resources may be carefully monitored. When the 

55 applet's usage gets too high, the applet may be warned 
that it needs to cut its resource usage or be terminated. 
If the applet continues to increase its resource usage, 
the threads associated with the applet may be terminat- 
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ed together Thus, if the applet is maliciously designed 
to produce multiple resource consuming threads, all of 
the threads may be aborted together. Additionally, any 
system threads that execute applet code may have that 
execution reliably terminated in a way that does not cor- 
rupt the state of resource objects that are not owned by 
the malicious applet. 

[0010] These and other advantages of the present in- 
vention will become apparent upon reading the following 
detailed descriptions and studying the various figures of 
the drawings. 

BRIEF DESCRIPTION OF THE DRAWINGS 

[0011] The invention, together with further advantag- 
es thereof, may best be understood by reference to the 
lollowing description taken in conjunction with the ac- 
companying drawings in which: 
[0012] Figure 1 is a diagrammatic representation of 
the^ relationships between mechanisms (or managing 
resource usage in accordance with one embodiment of 
the present invention. 

[001 3] Figures 2A and 2B represent a flowchart illus- 
trating a process for allocating memory in accordance 
with embodiment of the present invention. 
[001 4] Figure 3 is a flowchart illustrating the operation 
of Figure 2 of reclaiming a resource in accordance with 
one embodiment of the present invention. 
[0015] Figure 4 is a flowchart illustrating a process for 
managing CPU or network usage in accordance with 
one embodiment of the present invention. 
[0016] Figure 5 illustrates a typical, general-purpose 
computer system suitable for implementing the present 
invention. 

DETAILED DESCRIPTION OF THE EMBODIMENTS 

[001 7] Reference will now be made in detail to specific 
embodiments of the invention. While the invention will 
be described in conjunction with specific embodiments, 
it will be understood that it is not intended to limit the 
invention to the described embodiments. On the contra- 
ry it is intended to cover alternatives, modifications, and 
equivalents as may be included within the spirit and 
scope of the invention as defined by the appended 
claims. In the following description, numerous specific 
details are set forth in order to provide a thorough un- 
derstanding of the present invention. The present inven- 
tion may be practiced without some or all of these spe- 
cific details. In other instances, well known process op- 
erations have not been described in detail in order not 
to unnecessarily obscure the present invention. 
[0018] In general, the invention pertains to methods 
and apparatus for managing resource usage among re- 
lated code, such as code executed on behalf of an ap- 
plet that is downloaded from a particular web site. Re- 
lated code may include any code that may logically be 
charged as a single entity for it's resource usage. For 



example, related code may include threads or methods 
that are directly executed by the applet as part of the 
downloaded code and/or threads on methods that are 
initiated by the applet. For instance, a system method 
5 may be called by an applet method. Related code may 
also include code executed on behalf of multiple applets 
from a same source (e.g., web site) or from related 
sources (e.g. : sites owned by the same company). Re- 
lated code may also take forms other than applets. 

10 [0019] For simplicity, the code executed on behalf of 
an applet will be used throughout the specification as 
an' example of related code. In the illustrated embodi- 
ment, resource usage is tracked for each applet. For ex- 
ample, the total memory consumption of an applet may 

15 be tracked and managed. By way of another example, 
the CPU time taken by an applet for a particular duration 
of time (e.g., CPU time as a percentage of the time pe- 
riod) may also be tracked and managed. 
[0020] Resource usage is also tracked by associating 

20 some kind of indicator with each applet. The indicator 
tracks how much of a particular resource is consumed 
by the applet. The indicator may track the absolute con- 
sumption of a particular resource. For example, a coun- 
ter tracks the number of bytes (e.g., of Java™ heap 

25 memory) that a particular applet consumes. Alternative- 
ly, the indicator may track the relative consumption of a 
particular resource. By way of example, a CPU usage 
indicator tracks a percentage of a predefined period of 
time that an applet is using the CPU. Each applet may 

30 have a plurality of associated indicators that each track 
how much of a particular resource type is being con- 
sumed by the applet and related code. For example, 
each applet may have a memory usage indicator, a CPU 
usage indicator, and a network usage indicator. 

35 [0021] Each resource object that is allocated or uti- 
lized may also be associated with a responsible applet. 
Any suitable factors may be considered to determine 
which applet or set of applets is responsible for a par- 
ticular resource object. For example, when a memory 

40 block is allocated on behalf of an applet, that applet is 
deemed responsible for that memory block and is then 
associated with the allocated memory block. Several 
embodiments of mechanisms for associating a resource 
object with a responsible set of related code are outlined 

45 below with references to Figure 1 . 

[0022] After a resource object is associated with a 
particular applet, the appropriate resource indicators of 
the applet may then be updated after the resource object 
is allocated for the applet's use and after the resource 

so object is deallocated from the applet. For example, 
when a memory block is allocated for an applet's use, 
the applet's memory counter is incremented by the size 
of the allocated memory block. 
[0023] Some of the mechanisms that are used for 

55 tracking resource usage of a applet may be represented 
in the form of an entity (herein called a resource con- 
text). Additionally, the resource context is an entity 
against which that resource usage may be charged 
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when code that is associated with the resource context 
utilizes a resource. In other words, a resource context 
is an entity through which resource usage can be 
tracked and managed. A resource context may also be 
associated with a body of code and the resources con- 
sumed by the execution of such body of code. 
[0024] Figure 1 is a diagrammatic representation of 
the relationships between various mechanisms for man- 
aging resource usage in accordance with one embodi- 
ment of the present inventibn. As shown, a resource 
context 1 02 includes a set of indicators for tracking how 
much of each resource type that the resource context is 
consuming. In one embodiment, the indicators track 
CPU usage, memory usage, network usage, number of 
open files, number ol open sockets, and number of mon- 
itors. 

[0025] The resource context 1 02 may also be associ- 
ated with one or more predetermined limits for each re- 
source type (e.g., heap memory). Each set of limits in- 
dicates how much of the associated resource type that 
the resource context's associated code may access be- 
fore an action is taken to prevent resource over con- 
sumption. For example, the resource context 102 may 
be associated with three memory usage limits: 2 kbytes, 
4 kbytes, and 5 kbytes (the maximum usage). When the 
resource context's memory usage exceeds 2 kbytes, the 
applet associated with the resource context may be 
warned that it's resource usage is 3 kbytes away from 
reaching the maximum value of 5 kbytes. After the re- 
source context's memory usage exceeds 4 kbytes, the 
resource context may be warned that it is about to be 
terminated for consumming too much of a resource. 
Memory allocation may no longer be allowed when an 
applet exceeds the first and/or second limits. After us- 
age exceeds 5 kbytes the resource context's applet may 
be terminated without warning. 
[0026] In the illustrated embodiment of Figure 1, the 
resource context 102 is associated with a resource ob- 
ject 104 that includes a plurality of memory usage limits 
or thresholds: limitl , Iimit2, MaxLimit, a lowLimit array, 
and a highLimit array for a particular resource type (a 
g. t memory). Although it is not shown, the resource con- 
text may be associated with any number of resource ob- 
jects (e.g., a resource object for each of the following 
resources: CPU usage : network usage, socket usage, 
file usage, and monitor usage). 
[0027] Turning back to Figure 1 , MaxLimit represents 
the maximum amount of memory thai may be consumed 
by the related code associated with the resource con- 
text. Limitl and Iimit2 represent thresholds that may be 
utilized to trigger a warning to the applet that memory 
usage is approaching the maximum threshold. For ex- 
ample, limitl may be set to 1 kilobyte: Iimit2 to 2 kilo- 
bytes; and MaxLimit to 3 kilobytes of memory usage. 
[0028] When limitl is exceeded by the associated re- 
source context (e.g., the associated applet uses more 
than 1 kilobyte), the applet is notified that it is approach- 
ing the maximum usage limit. When Iimit2 is exceeded 



(e.g., the associated applet uses more than 2 kilobytes), 
the applet may be notified that it is even closer to the 
maximum usage limit. When the maximum usage is ex- 
ceeded (the applet uses more than 3 kilobytes), the ap- 
5 plet's memory access may simply be terminated without 
any further warnings. Likewise, when the applet drops 
below a threshold, the applet may be notified that the it 
is no longer approaching the maximum threshold limit. 
[0029] Any mechanism may be implemented for noti- 
fy tying the applet that memory is about to be exceeded or 
no longer about to be exceeded. In the illustrated em- 
bodiment, the resource object 104 has access to a re- 
source callback 116. A resource object gains access to 
a resource callback when an application registers and 
15 indicates a desire to be notified of resource usage. 
When a threshold is exceeded or when a same or other 
threshold is no longer exceeded, a callback is initiated 
for registered users. 

[0030] A pair of values may be provided for each limit 
20 to obtain a hysteresis effect. For example, once re- 
source usage exceeds limitl, the resource usage has 
to drop below a lowLimit value that is lower than the 
limitl value to trigger a notification. Resource usage has 
to then exceed a highLimit value that is higher than the 
zs limiti value to again trigger a notification. Likewise, a 
lowLimit value and a highLimit value are provided for 
Iimit2 and MaxLimit. 

[0031] The resource context is associated with a par- 
ticular set of related code. This association may occur 

30 in any suitable manner. For example, the application 
framework that receives application code sets may pre- 
determine the assignment of resource contexts to par- 
ticular sets of related code. This determination may be 
based on any suitable policy considerations. For in- 

35 stance, all the code that is assigned to a particular pro- 
tection domain may be assigned to a single resource 
context. As will be appreciated by those skilled in the 
art, a protection domain (which feature is included within 
the security features of JDK 1 .2) generally accords per- 
missions to a set of code. In other words, the mecha- 
nisms for assigning a protection domain to a particular 
set of code may be leveraged to assign a resource con- 
text to the same set of code. 

[0032] A protection domain is generally associated 
^5 with a particular thread based on which classloader was 
used to load the class of the method being executed by 
that particular thread. Several embodiments for assign- 
ing protection domains to threads based on classloader 
are described in Java 2 Platform Security Architecture, 
50 API Design, and Implementation by Li Gong (published 
by Addison Wesley, ISBN 0-201-31000-7), which text is 
herein incorporated by reference in its entirety 
[0033] As shown in Figure 1, a particular thread 106 
that is executing on behalf of resource context 102 is 
55 also executing within protection domain 116. More spe- 
cifically, a particular method 110 of the thread 106 is cur- 
rently being executed, and the method 1 1 0 is associated 
with a corresponding stackframe 108. The currently ex- 
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ecuting method 110 of the thread 106 is loaded as part 
of a class 112 by classloader 114. Classloader 114 is 
associated with protection domain 1 1 6 that may then be 
associated with resource context 102. In one embodi- 
ment, each thread may be assigned to and traced to an 
associated resource context through a classloader and 
its associated protection domain. 
[0034] Of course, several sets of code that belong to 
different protection domains may be assigned to a same 
resource context. For example, a first applet may origi- 
nate from a Pepsi controlled web site, and a second ap- 
plet may originate from a Pizza Hut controlled web site. 
Although the two applets may have different protection 
domains since they originate from different web sites 
and are loaded by different class loaders, one may wish 
to charge resource usage against a same resource con- 
text since Pizza Hut and Pepsi are commonly owned. 
[0035] Some of the mechanisms for tracking resource 
usage may also be associated with the resource itself. 
In one embodiment, each allocated resource object may 
be referenced to a responsible resource context. As 
shown, a memory block 120 contains a pointer to the 
responsible resource context 102 that is associated with 
a set of code that is responsible for the memory block. 
Thus, allocation of the resource maybe charged against 
the responsible resource context, and deallocation may 
be credited towards the responsible resource context 
through the associated pointer. For example, the appro- 
priate resource counter of the responsible resource con- 
text is incremented when the resource is allocated. 
[0036] Figures 2A and 2B represent a flowchart illus- 
trating a process 200 for allocating memory in accord- 
ance with an embodiment of the present invention. A 
similar procedure may be implemented for any type of 
resource that may be generally assigned in an absolute 
amount (e.g., number of bytes). For example, this pro- 
cedure may be implemented for allocating open files, 
open sockets, and monitors. 

[0037] Initially, an active protection domain is deter- 
mined in operation 202. Techniques for determining the 
active protection domain are further described in Java 
2 Platform Security Architecture, API Design, and Im- 
plementation by Li Gong (published by Addison Wesley, 
ISBN 0-201-31000-7), which text is herein incorporated 
by reference in its entirety. A resource context that is 
associated with the active protection domain is then 
identified in operation 204. Although assignment o1 the 
resource context is a policy decision and may be imple- 
mented in any suitable manner, in the illustrated embod- 
iment the resource context is directly mapped to the ac-. 
tive protection domain. 

[0038] The mapping of a resource context to a partic- 
ular protection domain may be set up a priori by the ap- 
plication framework. Alternatively, the application 
framework may create a separate classloader for each 
code source (e.g., each URL site). All classes loaded by 
a particular classloader are then assigned to a particular 
protection domain for that code source. The application 



framework then instantiates a resource context and as- 
sociates it with the protection domain of the particular 
classloader. 

[0039] A memory counter is then incremented for the 

s identified resource context in operation 206. It is then 
determined whether a resource usage threshold has 
been exceeded in operation 208. For example, it is de- 
termined whether the limit! , Iimit2, or maxLimit thresh- 
olds of Figure 1 has been exceeded. Alternatively, it may 

io be determined whether a highLimit value is exceeded. 
[0040] If the resource usage threshold has not been 
exceeded, memory is allocated and a resource context 
is then recorded for the allocated memory in operation 
210. For example, a pointer to the resource context is 

75 recorded within the allocated memory portion. Thus, 
when the memory portion is deallocated, the resource 
counter of the appropriate resource context may then 
be decremented. After the resource context is recorded, 
the memory allocation procedure then ends. 

20 [0041] If a resource usage threshold has been ex- 
ceeded, a resource reclamation process may then be 
triggered in operation 212. For example, a garbage col- 
lection procedure is initiated for the heap memory. One 
embodiment of resource reclamation is described with 

25 reference to Figure 3. Resource reclamation may be 
triggered to deallocate any memory that is no longer 
used by the responsible resource context's set of related 
code. This memory deallocation may cause the memory 
usage to no longer exceed a threshold. 

30 [0042] After resource reclamation is triggered, it is 
then determined whether the threshold is still exceeded 
in operation 21 4. If the threshold is no longer exceeded, 
the memory is allocated and the resource context is re- 
corded for the allocated memory in operation 210. The 

35 memory allocation procedure 200 then ends. The appli- 
cation then has a chance to cut back its memory usage. 
[0043] If the threshold is still exceeded, registered re- 
source callbacks may then be notified in operation 216. 
Any other alarm type mechanisms may be implemented 

40 for warning that the set of code of the resource context 
is approaching the maximum limit for a particular re- 
source. For a callback type alarm, mechanisms could 
be made available that allow an application to register 
for callbacks from the application framework. For exam- 

45 pie, an applet may register to be informed when its mem- 
ory usage exceeds a threshold. When a threshold is ex- 
ceeded, the applet is then notified that it is approaching 
the maximum memory usage, for example. 
[0044] Turning to Figure 2B, it is then determined 

50 whether.a maximum threshold is exceeded in operation 
218. If the maximum threshold is not exceeded, memory 
is then allocated and a resource context is recorded for 
the allocated memory in operation 210 of Figure 2A. 
However, if the maximum is exceeded, the memory 

55 counter is decremented in operation 220 (since it was 
previously incremented in operation 206). An Out Of 
Memory exception is then thrown to indicate that an er- 
ror has occurred and memory will not be allocated in 
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operation 222. The memory allocation procedure 200 
then ends. 

[0045] When a particular set of related code exceeds 
its maximum memory usage, mechanisms may be also 
implemented to abort the threads executing on behalf 
of the related code. 

[0046] Figure 3 is a flowchart illustrating the operation 
212 of Figure 2 of reclaiming a resource in accordance 
with one embodiment of the present invention. Initially, 
memory is scanned for membry objects that are not ref- 
erenced by another object in operation 302. For exam- 
ple, a memory object may have been referenced by a 
local variable that is no longer in use. For each non-ref- 
erenced memory object, the size is deducted from a cor- 
responding resource counter of a resource context that 
is referenced by the memory object in operation 304 {e. 
g., a particular resource context was recorded in oper- 
ation 210 of Figure 2 during allocation of the memory 
object). The memory is then reclaimed for the non-ref- 
erenced memory objects in operation 306. 
[0047] It is then determined whether memory usage 
has dropped below a resource usage threshold in oper- 
ation 308. Memory usage may have dropped, for exam- 
ple, because the associated applet decreased its mem- 
ory usage in response to a warning that it was approach- 
ing the maximum memory limit. If memory usage has 
not dropped, the resource reclamation procedure 212 
ends. If memory usage has dropped below the thresh- 
old, registered research callbacks are notified in opera- 
tion 310. For example, an applet associated with the re- 
source context is notified that it is no longer in danger 
of exceeding its maximum memory allotment. The mem- 
ory reclamation procedure 212 then ends and control is 
passed back to the memory allocation procedure 200 of 
Figures 2A and 2B. 

[0048] While the resource management techniques 
described above with reference to Figures 2 through 3 
work well for resources that have absolute usage limits, 
other mechanisms may be implemented for managing 
other types of resouce usage that more easily measured 
or tracked in relative terms. For example, an applet's 
CPU usage may be tracked as a percentage of use dur- 
ing a particular time period. When the applet's CPU us- 
age exceeds a certain percentage, one may not wish to 
halt the applet's use of the CPU altogether but simply 
decrease the applet's priority for using the CPU. 
[0049] Figure 4 is a flowchart illustrating a process 
400 for managing CPU or network usage in accordance 
with one embodiment of the present invention. Of 
course, a similar resource may also be managed with 
the procedure of Figure 4. Initially, the CPU or network 
usage is monitored for all threads associated with a re- 
source context in operation 402. It is then determined 
whether a first threshold is exceeded in operation 404. 
If the first threshold is not exceeded, CPU or network 
usage continues to be monitored in operation 402. 
[0050] If the first threshold is exceeded, the scheduler 
is instructed to lower the priority of the threads associ- 



ated with the resource context in operation 406. The 
CPU or network usage is then monitored again for all 
the threads associated with the resource context in op- 
eration 408 to determine when to boost the priority back 

5 up. It is then determined whether resource usage has 
dropped below a second threshold in operation 410. Of 
course, a single threshold may be used to determine 
when to lower and boost the priority. 
[0051] If usage has not dropped below the second 

io threshold, it is then determined whether the first thresh- 
old is still exceeded in operation 41 2. If thefirst threshold 
is still exceeded, the scheduler is again instructed to 
lower the priority of the thread associated with the re- 
source context in operation 406. In other words : the pri- 

*5 orrty of the thread associated with a particular resource 
context continues to be lowered as the long as the first 
threshold is still exceeded. If the first threshold is not 
exceeded, the CPU or network usage is then monitored 
again for all the thread associated with the resource con- 

20 text in operation 408 to determine whether to lower the 
priority again (via operation 414) or to boost the priority 
back up (via operation 406). 

[0052] When the resource usage drops below the 
second threshold, the scheduler is then instructed to 

25 boost the priority of the thread associated with resource 
context in operation 414. It is then determined whether 
the priority is reduced below the original priority in op- 
eration 41 6. If it is not reduced below the original priority, 
CPU or network usage is monitored for ail threads as- 

30 sociated with the resource context in operation 402 to 
determine whether to drop the priority (i.e., when mem- 
ory consumption exceeds the first threshold). If the pri- 
ority is reduced below the original priority, the CPU or 
network usage is monitored in operation 408 to deter- 

35 mine when to boost the priority {Le., when dropping be- 
low the second threshold). 

[0053] These mechanisms for tracking resource us- 
age may then be utilized to determine whether a partic- 
ular code set is utilizing too much of a resource type. 

40 For example, the resource counter of a particular re- 
source context and associated code set may be ana- 
lyzed (e.g., compared against a predetermined limit for 
the particular resource) to determine whether the re- 
source context is consuming too much of that particular 

45 resource type (or is about to consume too much). When 
it is determined that a particular set of related code is 
consuming too much ol a particular resource, steps may 
then be taken to halt and/or prevent further consump- 
tion. 

so [0054] Figure 5 illustrates a typical, general-purpose 
computer system suitable for implementing the present 
invention. The computer system 1030 includes any 
number of processors 1032 (also referred to as central 
processing units, or CPUs) that are coupled to memory 

55 devices including primary storage devices 1034 (typi- 
cally a read only memory, or ROM) and primary storage 
devices 1036 (typically a random access memory, or 
RAM). The computer system may take any suitable 
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form. For example, the computer system may be inte- 
grated with a navigational system or television set top 
box. 

[0055] Computer system 1030 or, more specifically, 
CPUs 1032, may be arranged to support a virtual ma- 
chine, as will be appreciated by those skilled in the art. 
As is well known in the art, ROM acts to transfer data 
and instructions uni-directionally to the CPUs 1032, 
while RAM is used typically to transfer data and instruc- 
tions in a bi-directional manner. CPUs 1032 may gener- 
ally include any number of processors. Both primary 
storage devices 1034, 1036 may include any suitable 
computer-readable media. A secondary storage medi- 
um 1038, which is typically a mass memory device, is 
also coupled bi-directionally to CPUs 1 032 and provides 
additional data storage capacity. The mass memory de- 
vice 1038 is a computer-readable medium that may be 
used to store programs including computer code, data, 
and the like. Typically, mass memory device 1038 is a 
storage medium such as a hard disk or a tape which 
generally slower than primary storage devices 1034, 
1036. Mass memory storage device 938 may take the 
form of a magnetic or paper tape reader or some other 
well-known device. It will be appreciated that the infor- 
mation retained within the mass memory device 1038, 
may, in appropriate cases, be incorporated in standard 
fashion as part of RAM 1036 as virtual memory. A spe- 
cific primary storage device 1034 such as a CD-ROM 
may also pass data uni-directionally to the CPUs 1 032. 
[0056] CPUs 1032 are also coupled to one or more 
input/output devices 1040 that may include, but are not 
limited to, devices such as video monitors, track balls, 
mice, keyboards, microphones, touch-sensitive dis- 
plays, transducer card readers, magnetic or paper tape 
readers, tablets, styluses, voice or handwriting recog- 
nizers, or other well-known input devices such as, of 
course, other computers. Finally, CPUs 1032 optionally 
may be coupled to a computer or telecommunications 
network, e.g., an Internet network or an intranet net- 
work using a network connection as shown generally 
at 1012. With such a network connection, it is contem- 
plated that the CPUs 1032 might receive information 
from the network, or might output information to the net- 
work in the course of performing the above-described 
mechanisms for managing resource usage. Such infor- 
mation, which is often represented as a sequence of in- 
structions to be executed using CPUs 1032, may be re- 
ceived from and outputted to the network, for example, 
in the form of a computer data signal embodied in a car- 
rier wave. The above-described devices and materials 
will be familiar to those of skill in the computer hardware 
and software arts. 

[0057] Although only a few embodiments of the 
present invention have been described, it should be un- 
derstood that the present invention may be embodied 
in many other specific forms without departing from the 
spirit or the scope of the present invention. By way of 
example, the operations involved with resource man- 



agement may be reordered. Steps may also be removed 
or added without departing from the spirit or the scope 
of the present invention. 

[0058] Although the techniques for managing re- 
s source usage in accordance with the present invention 
are particularly suitable for implementation with respect 
to a Java™ based environment, the techniques may 
generally be applied in any suitable object-based envi- 
ronment. In particular, the techniques are suitable for 
10 use in platform-independent object-based environ- 
ments. It should be appreciated that the methods may 
also be implemented in some distributed object-oriented 
systems. 

[0059] Additionally, although registered callbacks 
is were initiated when memory usage exceeded a thresh- 
old, callbacks may be eliminated altogether. When a set 
of related code has exceeded a maximum threshold, fur- 
ther memory consumption may simply be prevented or 
minimized. In contrast, although registered callbacks 
20 were not initiated when a set of related code's CPU or 
network usage exceeded a threshold, of course, call- 
backs may also be implemented when CPU or network 
usage limits are reached. Callbacks may also be initiat- 
ed when CPU or network usage drops below a thresh- 
es old. 

[0060] Although resource reclamation was initiated 
when a resource context exceeds any of the resource 
limits, of course, resource reclamation may be eliminat- 
ed or only initiated after a single limit is exceeded. Also, 
30 resource reclamation may simply be triggered periodi- 
cally in a parallel process that has nothing to do with 
whether or not the resource context has exceeded a re- 
source limit. 

[0061] Accordingly, the present embodiments are to 
35 be considered as illustrative and not restrictive, and the 
invention is not to be limited to the details given herein, 
but may be modified within the scope and equivalents 
of the appended claims. 

40 

Claims 

1. A method for managing resource usage of a partic- 
ular resource by a set ol related code, the method 
45 comprising: 

associating a resource indicator with the relat- 
ed code that indicates an amount of resource 
usage of the particular resource by the related 
so code; and 

updating the resource indicator when the relat- 
ed code increases or decreases its collective 
resource usage of the particular resource. 

ss 2. A method as recited in claim 1 wherein the resource 
indicator's amount represents an absolute value of 
the resource usage. 
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3. A method as recited in claim 1 wherein the resource 
indicator's amount represents a proportional value 
of the resource usage. 

4. A method as recited in any of claims 1-3 further 
comprising: 

associating the related code with each re- 
source portion of the particular resource that is 
allocated for the related code; and 
disassociating the related code with each re- 
source portion of the particular resource that is 
deallocated for the related code, 
wherein the resource indicator is decreased 
when a resource portion is deallocated and in- 
creased when a resource portion is allocated 
lor the related code. 

5. A method as recited in claim 4 further comprising: 

allocating the particular resource to the related 
code when the resource indicator is below a 
maximum predetermined threshold; and 
indicating an error and not allocating the partic- 
ular resource when the resource indicator is 
above the maximum; predetermined threshold. 

6. A method as recited in claim 5 wherein the error is 
indicated by throwing an out_of_memory excep- 
tion. 

7. A method as recited in claims 4 or 5 wherein the 
related code is disassociated through a garbage 
collection procedure. 

8. A method as recited in any of claims 1 -7 wherein 
the particular resource is selected from a group con- 
sisting of memory usage, open file usage, open 
socket usage, and monitor usage. 

9. A method as recited in claim 8 wherein the resource 
indicator indicates a percentage of the particular re- 
source that is utilized by the related code. 

10. A method as recited in claims 8 or 9 further com- 
prising: 

associating a plurality of thresholds with the 
particular resource and the related code; and 
notifying a registered resource callback when 
the amount of resource usage of the particular 
resource by the related code exceeds a first 
one of the thresholds. 

11. A method as recited in claim 10 further comprising 
notifying a registered resource callback when the 
amount of resource usage of the particular resource 
by the related code drops below a second one of 



the thresholds that has a different value than the 
first threshold. 

12. A method as recited in claim 8 further comprising 
5 notifying a registered resource callback when the 

amount of resource usage of the particular resource 
by the related code drops below the first threshold. 

13. A method as recited in any of claims 1-7 wherein 
io the particular resource is CPU usage or network us- 
age. 

14. A method as recited in claim 1 3 further comprising: 

75 associating a threshold with the particular re- 

source and the related code; and 
indicating that the related code's priority for 
CPU usage be decreased when the amount of 
resource usage of the particular resource by 

20 the related code exceeds the threshold. 

15. A method as recited in claim 14 further comprising: 

associating a second threshold with the partic- 
25 ular resource and the related code; and 

indicating that the related code's priority for 
CPU usage be boosted when the amount of re- 
source usage of the particular resource by the 
related code drops below the second threshold. 

30 

16. A method as recited in any of claims 1-15 wherein 
the related code is configured to be executed on be- 
half of an applet in the form of threads. 

35 17. a method as recited in any of claims 1-16 further 
comprising: 

associating a plurality of resource indicators 
with the related code that each indicates an 

40 amount of resource usage of a plurality of re- 

sources by the related code; and 
updating a selected resource indicator when 
the related code increases or decreases its col- 
lective resource usage ol the associated re- 

45 source. 

18. A method as recited in claim 17 wherein the re- 
sources include memory usage, CPU usage, and 
network usage. 

so 

19. A method as recited in claim 18 wherein the re- 
sources further include open file usage and open 
socket usage. 

55 20. A computer readable medium containing computer 
codes for managing resource usage, the computer 
readable medium comprising: 
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computer code for associating a resource indi- 
cator with the related code that indicates an 
amount of resource usage of the particular re- 
source by the related code; and 
computer code for updating the resource indi- 
cator when the related code increases or de- 
creases its collective resource usage of the par- 
ticular resource. 

21 . A computer readable medium as recited in claim 20 
further comprising: 

computer code for associating the related code 
with each resource portion of the particular re- 
source that is allocated for the related code; 
and 

computer code for disassociating the related 
code with each resource portion of the particu- 
lar resource that is deallocated for the related 
code, 

wherein the resource indicator is decreased 
when a resource portion is deallocated and in- 
creased when a resource portion is allocated 
for the related code. 

22. A method as recited in claims 20 or 21 further com- 
prising: 

computer code for allocating the particular re- 
source to the related code when the resource 
indicator is below a maximum predetermined 
threshold; and 

computer code for indicating an error and not 
allocating the particular resource when the re- 
source indicator is above the maximum prede- 
termined threshold. 

23. A computer readable medium as recited in any of 
claims 20-22 wherein the particular resource is se- 
lected from a group consisting of memory, open 
files, open sockets, and monitors. 

24. A computer readable medium as recited in claim 23 
further comprising: 

computer code for associating a plurality of 
thresholds with the particular resource and the 
related code; and 

computer code for notifying a registered re- 
source callback when the amount of resource 
usage of the particular resource by the related 
code exceeds a first one of the thresholds. 

25. A computer readable medium as recited in claim 23 
further comprising computer code for notifying a 
registered resource callback when the amount of 
resource usage of the particular resource by the re- 
lated code drops below a second one of the thresh- 



olds that has a different value than the first thresh- 
old. 

26. A computer readable medium as recited in any of 
s claims 20-22 wherein the particular resource is 

CPU usage or network usage. 

27. A computer readable medium as recited in claim 26 
further comprising: 

10 

computer code for associating a threshold with 
the particular resource and the related code; 
and 

computer code for indicating that the related 
75 code's priority for CPU usage be decreased 

when the amount of resource usage of the par- 
ticular resource by the related code exceeds 
the threshold. 

20 28. A computer readable medium as recited in claim 27 
further comprising: 

computer code for associating a second th resh- 
old with the particular resource and the related 
25 code; and 

computer code for indicating that the related 
, code's priority for CPU usage be boosted when 
the amount of resource usage of the particular 
resource by the related code drops below the 
30 second threshold. 

29. A method as recited in any of claims 20-28 wherein 
the related code is configured to be executed on be- 
half of an applet in the form of threads. 

35 

30. A computer system for managing resource usage 
by a set of related code, the computer system com- 
prising: 

ao a resource context associated with the set of 

related code, the resource context having a re- 
source indicator that is associated with a re- 
source type and indicative of how much of the 
resource type is being utilized by the set of re- 
45 lated code; 

a resource object associated with the resource 
context, wherein the resource object indicates 
how much of the resource type may be utilized 
by the set of related code; and 
so an update mechanism configured to increment 

the resource indicators of the resource context 
when the set of related code increases its re- 
source usage of the resource type associated 
with the updated resource indicator. 

55 

31. A computer system as recited in claim 30 wherein 
the resource object has an associated maximum 
limit that indicates a maximum amount of resource 
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usage by the set ot related code for the resource 
type. 

32. A computer system as recited in claim 31 wherein 
the resource object has an associated first limit that s 
is lower than the maximum limit, the computer sys- 
tem further comprising an alarm configured to alert 
the set of related code when its resource usage ex- 
ceeds the first limit. 



33. A computer system as recited in claim 32 wherein 
the alarm is further configured to after the set of re- 
lated code when its resource usage drops back be- 
low the first limit. 



10 
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34. A computer system as recited in claims 32 or 33 
wherein the resource object has an associated sec- 
ond limit that is lower than the first limit and the 
alarm is further configured to alter the set of related 
code after its resource usage rises above the first 20 
limit and then drops back below the second limit. 

35. A computer system as recited in any of claims 30-34 
wherein the resource type is selected from a group 
consisting of memory usage, CPU usage, network 25 
usage, open file usage, open socket usage, and 
monitor usage. 

36. A computer system as recited in any of claims 30-35 
wherein the update mechanism is further config- 30 
ured to map the resource context to any resource 
portions of the resource type that are allocated on 

the resource context's related code's behalf. 

37. A computer system as recited in any of claims 30-36 35 
wherein the set of related code of the resource con- 
text is associated with a single protection domain. 
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